OpenShell v0.0.41
Quick install
:::bash
curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.41 sh
What's Changed
- fix(server): restrict SQLite database file permissions to 0o600 by @alangou in https://github.com/NVIDIA/OpenShell/pull/1359
- feat(ci): add helm-unittest mise task and CI step by @mesutoezdil in https://github.com/NVIDIA/OpenShell/pull/1367
- feat(policy): agent-driven policy management — the agent half by @zredlined in https://github.com/NVIDIA/OpenShell/pull/1323
- fix(images): remove image-specific owner and mode set for gateway binary by @sjenning in https://github.com/NVIDIA/OpenShell/pull/1371
- fix(cli): cp-style sandbox download and workspace-boundary check by @laitingsheng in https://github.com/NVIDIA/OpenShell/pull/1353
- test(e2e): add bypass detection test for sandbox REJECT rules by @russellb in https://github.com/NVIDIA/OpenShell/pull/1368
- feat(helm): support custom CA for OIDC issuer TLS verification by @sjenning in https://github.com/NVIDIA/OpenShell/pull/1373
- fix(gateway): keep vm driver opt-in by @drew in https://github.com/NVIDIA/OpenShell/pull/1375
- feat(cli): add sandbox resource flags by @drew in https://github.com/NVIDIA/OpenShell/pull/1376
- docs: replace --sync with --upload . in sync-files example by @mesutoezdil in https://github.com/NVIDIA/OpenShell/pull/1366
- refactor(core): eliminate duplicate utilities across crates by @ericcurtin in https://github.com/NVIDIA/OpenShell/pull/1381
Full Changelog: https://github.com/NVIDIA/OpenShell/compare/v0.0.40...v0.0.41